IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF)...
CVE-2026-9006
IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to server-side request forgery (SSRF) with the Ajax Proxy co
2026-06-23 归档
今日共收录 1003 条安全情报，包含 243 个 CVE，376 篇安全通告，以及 99 篇研究论文。
← 返回归档列表Incorrect caching of authentication between different polkit methods in qSnapper before version 1...
CVE-2026-41048
Incorrect caching of authentication between different polkit methods in qSnapper before version 1.3.3 allowed a local at
Incorrect caching of authentication between different users of the qSnapper dbus service before...
CVE-2026-41049
Incorrect caching of authentication between different users of the qSnapper dbus service before version 1.3.3 allowed a
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a...
CVE-2026-41045
A time-to-check-time-of-use in polkit authentication of qSnapper before version 1.3.3 allowed a local attacker to bypass
Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3...
CVE-2026-41047
Lack of authentication when using the "snapshot diff" functions in qSnapper before version 1.3.3 allowed a local attacke
A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are...
CVE-2026-12725
A heap-based buffer overflow was found in dnsmasq. When DNSSEC validation and query logging are both enabled, logging of
The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific...
CVE-2026-12549
The fix for CVE-2026-2443 was regressed by a subsequent rework commit that replaced specific overflow checks with a gene
IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8...
CVE-2026-12628
IBM Storage Protect Client 8.1.0.0 through 8.2.1.0 and IBM Storage Protect Snapshot For Windows 8.1.0.0 through 8.2.1.0
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3...
CVE-2026-41046
A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the...
CVE-2026-11942
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the reusable delete confirmation
IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This...
CVE-2026-11372
IBM TRIRIGA Application Platform 5.0.2 through 5.0.3 is vulnerable to cross-site scripting. This vulnerability allows an
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the...
CVE-2026-11943
Akaunting 3.1.21 contains an authenticated stored cross-site scripting vulnerability in the document timeline shown on i
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass...
CVE-2026-10845
IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to bypass authentication and gain unauthorize
IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3...
CVE-2024-51454
IBM Engineering Workflow Management 7.0.2 through 7.0.2 Interim Fix 035, 7.0.3 through 7.0.3 Interim Fix 017, and 7.1 th
motionEye's World-Readable Configuration File Exposes Admin Password Hash
CVE-2026-32315
# Security Advisory: World-Readable Configuration File Exposes Admin Password Hash in motionEye ## Summary motionEye v
Gogs has an Authentication Bypass via Unvalidated Reverse Proxy Headers
CVE-2026-25119
## Summary When `ENABLE_REVERSE_PROXY_AUTHENTICATION` is enabled, Gogs accepts the configured authentication header (de
Gogs has a Denial of Service in repository/wiki file listing web pages
CVE-2025-64719
### Summary A malicious user with rights to create a new file on a repository or wiki page can trigger a denial of servi
OpenCTI May Bypass Introspection Restriction
CVE-2024-37155
### Summary The regex validation used to prevent Introspection queries can be bypassed by removing the extra whitespace
Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to enforce bot-specific permission...
CVE-2026-8074
Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to enforce bot-specific permission checks on the user act
关于Microsoft ExchangeServer存在多个...
关于Microsoft ExchangeServer存在多个...